ssl/non-ssl

[Ed W]

Igor Sysoev wrote:
> On Fri, Jun 20, 2008 at 10:59:23AM -0400, jeff emminger wrote:
>
>   
>>> http://marc.info/?l=nginx&m=120992171505688
>>>
>>>       
>> are you saying it's not possible? 
>>     
>
> Yes, until SNI will be common.
>
>   

I'm just going some testing right now - however, I reckon that SNI *is* 
commonly supported now.  I would guess that penetration of FF2+ IE7 
(vista) is >50% on my sites and growing.  Sure that's not enough to 
gamble a whole business strategy on, but that's plenty enough support to 
start supporting in my opinion (hey how many people are primarily 
supporting only FF on their sites and paying only lipservice to IE 
anyway...)

Also it seems that using subjectAltName on the certificate is another 
route for sites where you have a known and reasonably fixed number of 
domain names (not sure how many CAs will sign these though?)

Ed W
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nginx.org/pipermail/nginx/attachments/20080620/8e023a1b/attachment.html>